4 ms·
You can't get the private key but you can sign with it, which is still plenty bad.
by tjoff 7mo ago
You can't get the private key but you can sign with it, which is still plenty bad.
- bob1029 7mo agoThe private key should be tightly scoped to its context of use. I would definitely agree with you if it's one key that rules the entire kingdom.
- tjoff 7mo agoNot sure I follow? Lets say it is limited to one use only, sign an app. Since I've got control of the box I can now use it to sign any app. Isn't that bad enough?